Re: linux-ipsec: How to know whats in your Linux system?

On Tue, 30 Jun 1998, Hugh Daniel wrote:

> Maybe the 'ipsec' command should have a --isthere flag? Does anyone

Why not export the information via /proc/?

cat /proc/net/ipsec_info

	Version: 1.0
	Linkage: static

cat /proc/net/ipsec_info
	Version: 1.0
	Linkage: module

cat /proc/net/ipsec_info
	Error: no such file

I've added /proc files before, and I'm a truly horrible C programmer; it's really easy. This might also be a good place to register transforms. You could even have an ipsec directory with different files for each transform, a file with a list of SAs, etc. Before doing too much of this, you should probably check on the linux-kernel list and consult with the kernel gods to see where they would like this information put; it should make merging the ipsec stuff easier down the road.

An alternative approach is to run "lsmod" and see if ipsec shows up in the module list, assuming that /proc/net/ipsec_info is there. If it is, then ipsec is a module; if not, then it's compiled in.

--
Todd Graham Lewis       Manager of Web Engineering    (800) 719-4664, x2804
******Linux******         MindSpring Enterprises      tlewis@mindspring.net